Ip Arp Inspection Vlan Logging - Cisco Catalyst 3560-X Command Reference Manual

Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands

ip arp inspection vlan logging

Syntax Description
Defaults
Command Modes
Command History
OL-21522-02
Downloaded from www.Manualslib.com
Use the ip arp inspection vlan logging global configuration command on the switch stack or on a
standalone switch to control the type of packets that are logged per VLAN. Use the no form of this
command to disable this logging control.
ip arp inspection vlan vlan-range logging {acl-match {matchlog | none} | dhcp-bindings {all |
none | permit} | arp-probe}
no ip arp inspection vlan vlan-range logging {acl-match | dhcp-bindings | arp-probe}
This command is available only if your switch is running the IP services feature set.
vlan-range Specify the VLANs configured for logging.
You can specify a single VLAN identified by VLAN ID number, a range of
VLANs separated by a hyphen, or a series of VLANs separated by a comma.
The range is 1 to 4094.
acl-match {matchlog | Specify that the logging of packets is based on access control list (ACL)
none} matches.
The keywords have these meanings:
dhcp-bindings Specify the logging of packets is based on Dynamic Host Configuration
{permit | all | none} Protocol (DHCP) binding matches.
The keywords have these meanings:
arp-probe Specify logging of packets permitted specifically because they are ARP
probes.
All denied or all dropped packets are logged. ARP probe packets are not logged.
Global configuration
Release Modification
12.2(53)SE2 This command was introduced.
manuals search engine
matchlog—Log packets based on the logging configuration specified in
•
the access control entries (ACE). If you specify the matchlog keyword in
this command and the log keyword in the permit or deny ARP access-list
configuration command, Address Resolution Protocol (ARP) packets
permitted or denied by the ACL are logged.
none—Do not log packets that match ACLs.
•
all—Log all packets that match DHCP bindings.
•
none—Do not log packets that match DHCP bindings.
•
permit—Log DHCP-binding permitted packets.
•
Catalyst 3750-X and 3560-X Switch Command Reference
ip arp inspection vlan logging
2-233